Privacy Policy

Who we are

This website is operated by Scuba Squad Mexico S de RL de CV, the company behind scubamedical.com. ScubaMedical was originally created to help our own dive center process medical screening forms, but we felt the service would be useful to the wider diving community and now make it available to anyone.

If you have questions about this policy or your data, email us at [email protected].

What personal data we collect

Eligibility-check responses (anonymous analytics)

When you complete an eligibility check, your answers to the medical screening questions are saved permanently for analytical and statistical purposes. These responses are stored without any identifying information — they cannot be linked back to you. We may publish aggregated statistics, such as the total number of screenings performed and which areas of the screening process most frequently require further medical evaluation.

Personal information (name, date of birth, email, signature)

How we handle your personal information depends on whether you arrived via a dive center and whether you choose to share your results:

• You came from a dive center and choose to send your results to them: Your name, date of birth, email address, and signature are transmitted to our servers so the dive center can view and download a PDF of your eligibility check. This personal information is retained on our servers for a period of up to 180 days to give dive centers time to process and retain the document for their records. After this retention period, personal information is automatically purged from both our live systems and backups. You should ask your dive center whether they retain the downloaded PDF in their own systems beyond this period — we have no control over data once it leaves our platform.
• You did not come from a dive center, or you choose not to send your results: You can still generate a PDF containing your personal information, but that PDF is created entirely within your browser. Your personal details are never transmitted to our servers. The generation process uses data held in your browser's local storage and produces the document on your device.

Local storage

We use your browser's local storage (not cookies) to hold your questionnaire responses, language preference, and — if you arrived from a dive center — the association with that dive center. This data stays on your device and enables the site to function, including assembling the PDF entirely in your browser when you choose not to send your results to a dive center.

You can clear all locally stored data at any time using the "Clear my data" button in the site footer.

Cookies

The public-facing eligibility check does not set any cookies. We do not use any third-party tracking, advertising, or analytics cookies anywhere on this site.

If you use the dive center portal (the administrative area for registered dive centers), a single session cookie is set to keep you logged in. This cookie is strictly necessary for authentication and contains no tracking or advertising data. It expires after seven days of inactivity.

Analytics

We do not use any third-party analytics tools (such as Google Analytics) to track visitors to this website. The only analytics we collect are the anonymous, de-identified eligibility-check responses described above.

Who we share your data with

If you arrived at ScubaMedical via a dive center's link and choose to send your results, a PDF containing your name, date of birth, signature, and eligibility responses will be made available to that dive center through our portal. The dive center may also receive an email notification that a new submission is available.

Beyond this, we do not sell, trade, or share your personal data with any third parties.

How long we retain your data

• Anonymous eligibility-check responses: Retained indefinitely for analytical purposes. These cannot be linked to any individual.
• Personal information sent to a dive center (name, date of birth, email, signature): Retained for up to 180 days from the date the eligibility check was completed. After this period, personal information is automatically purged from our live systems. We also purge personal information from backups.
• Personal information when not sent to a dive center: Never stored on our servers. Data exists only in your browser's local storage until you clear it.

What rights you have over your data

Because personal information linked to dive-center submissions is automatically purged after the retention period, and because submissions that are not sent to a dive center are never stored on our servers, it is generally not possible for us to locate or retrieve a specific individual's data upon request.

If you are a registered dive center operator and would like your account data deleted, or if you believe personal data about you is being held beyond the stated retention period, please contact us at [email protected].

You can clear all data stored in your browser at any time using the "Clear my data" button in the site footer.

Where your data is stored

Our servers are hosted by Amazon Web Services (AWS) in the United States. Personal information transmitted to our servers (when you choose to send results to a dive center) is stored in AWS infrastructure and automatically purged as described above.

Your contact information

We do not have a dedicated legal team or data protection officer. We are a small dive company doing our best to handle data responsibly while running a service to help the diving community. If you have any questions or concerns about your data or this policy, please contact us at [email protected].

Additional information

An EU-based representative is not required as processing complies with Article 27(2)(a) of the GDPR.